CVE-2016-3387
HighSummary
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, allowing remote attackers to gain privileges via unspecified vectors.
Risk Assessment
Exploitation of this vulnerability may lead to privilege escalation by attackers, posing a serious threat to the security of organizational systems.
Recommendation
It is recommended to update browsers to the latest versions and monitor systems for potential exploitation attempts.
Other vulnerabilities in Microsoft Internet Explorer 10, Microsoft Internet Explorer 11, Microsoft Edge
See all- CVE-2016-7196High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3295High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2016-3202High
The Chakra, JScript, and VBScript engines in Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.
- CVE-2016-0110High
Microsoft Internet Explorer versions 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
- CVE-2015-6155High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka 'Microsoft Browser Memory Corruption Vulnerability.'
- CVE-2015-6064High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, known as 'Microsoft Browser Memory Corruption Vulnerability.'
- CVE-2015-2542High
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service through memory corruption via a crafted website.
Original NVD description (English source)
Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3388.